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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 1 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)^ Responsive to communication(s) filed on 23 June 2003 . 
2a)D This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) E<] Claim(s) 1-79 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) D Claim(s) __ is/are rejected. 

7) D Claim(s) is/are objected to. 

8) ^ Claim(s) 1-79 are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)Q objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1 .121 (d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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Detailed Action 

Claims 1-79 are pending in this Office Action. 

Change of Address 

The change of address received on 5/20/05 has been entered. 

Election/Restrictions 

Restriction to one of the following inventions is required under 35 U.S.C. 121 : 

I. Claims 1-1 8, 77 are drawn to an access control list validation module, classified 
in class 709, subclass 229. 

II. Claims 19-28, 29-31, 73-75, 32-39, 78; are drawn to a configuration validation 
module, classified in class 709, subclass 220. 

III. Claims 40-49, 76, 79 are drawn to a communications network security policy that 
manipulates connectivity data, classified in class 709, subclass 221. 

IV. Claims 50-54, are drawn to a software system, classified in class 709, subclass 

223. 

V. Claims 55-63, are drawn to a software system with a parsing engine, classified in 
class 709, subclass 223. 

VI. Claims 64-72, are drawn to encoding instructions for detecting substantial 
inconsistencies with an ACL, classified in class 709, subclass 224. 



The inventions are distinct, each from the other because of the following reason: 
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Invention Groups I-IV are related as subcombinations disclosed as usable together in a 
single combination. The subcombinations are distinct from each other if they are show to be 
separately usable. In the instant case, invention in Group I has separate utility such access control 
list validation module with objects, rules, permissions and modeling. See MPEP § 806.05(c). 
Invention in Group II has separate utility and is a configuration validation module that accesses 
configuration, tests, and policy files and applies tests. Invention in Group III has separate utility 
as a communications network security policy for verifying configurations while manipulating 
connectivity information. Group IV has separate utility as a software system with configuration, 
test, and security databases for validation. Group V has separate utility as a software system with 
configuration, test, and security databases for validation and a parsing engine for instantiating 
computations. Group VI has separate utility such encoding instructions for detecting substantial 
inconsistencies with an ACL. 

Inventions in Group I-VI are unrelated. Inventions are unrelated if it can be shown that 
they are not disclosed as capable of use together and they have different modes of operation, 
different functions, or different effects (MPEP § 806.04, MPEP § 808.01). In the instant case the 
different inventions are 1) access control list validation module with objects, rules, permissions 
and modeling 2) a configuration validation module that accesses configuration, tests, and policy 
files and applies tests 3) a communications network security policy for verifying configurations 
while manipulating connectivity information 4) a software system with configuration, test, and 
security databases for validation 5) a software system with configuration, test, and security 
databases for validation and a parsing engine for instantiating computations 6) encoding 
instructions for detecting substantial inconsistencies with an ACL.. 
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Because these inventions are distinct for the reason given above and have acquired a 
separate status in the art because of their recognized divergent subject matter, restriction for 
examination purposes as indicated is proper. 

Because these inventions are distinct for the reasons given above and the search required 
for Group I is not required for Group II-VI, restriction for examination purposes as indicated is 
proper. 

Applicant is reminded that upon the cancellation of claims to a non-elected invention, the 
inventorship must be amended in compliance with 37 CFR 1 .48(b) if one or more of the 
currently named inventors is no longer an inventor of at least one claim remaining in the 
application. Any amendment of inventorship must be accompanied by a request under 37 CFR 
1.48(b) and by the fee required under 37 CFR 1.1 7(i). 

Applicant is reminded that to traverse this requirement on the grounds that the groups are 
not patentably distinct, applicant should present evidence or identify such evidence now of 
record showing the groups to be obvious variations of one another. If the groups are determined 
not to be patentably distinct and they remain in this application, any rejection of one group over 
prior art will apply equally to all other embodiments. See Ex parte Appeal No. 315-40, 152 
USPQ 71 (Bd. App. 1965). No argument asserting patentability based on the differences 
between the groups will be considered once the groups have been determined to comprise a 
single inventive concept. 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Benjamin R Bruckart whose telephone number 571-272-3982. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Saleh Najjar can be reached on (571) 272-4006. The fax phone numbers for the 
organization where this application or proceeding is assigned are (571) 273-8300 for regular 
communications and after final communications. 

Any inquiry of a general nature or relating to the status of this application or proceeding 

should be directed to the examiner whose telephone number is 571-272-3982. 

Benjamin R Bruckart 
Examiner 

Art Unit 2155 [\A J 
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